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DOCUMENT WITH USER AUTHENTICATION 
Field of the invention 

5 This invention relates to a document with user authentication. A document is any item 
which carries Information. An example would be ft cheque (Le. a bill of exchange drawn on 
a bank by a holder of an account at that bank) made payable to a given user or payee, in 
which the cheque includes supplemental payee authentication data. 

10 Background 

Cheque £taud is an increasing threat to the operation of the banking systems in many 
countries. 

15 A huge amount of fraud takes place by falsification of payee and amount on cheques, 
frequently by means of "cheque washing" carried out by using a solvent On the original 
printed characters. This invention is concerned with cheques that are fraudulently acquired 
and cashed at remote outlets such as cheque cashing agencies. Here the concern is with the 
means of identifying the person who presents the cheque, Le. is the payee named on the 

20 cheque the same person who h representing himself as the payee at the cheque cashing 
agency, According to one authority, "Experience in the banking industry &nds that 
aggressively checking identification would reduce bank fraud losses in large banks by 40% n 

Currently identity is frequently established by the use of drivers 3 licences, social security cards 
25 or other documentary means. But if person X has had a cheque made payable to him stolen, 
then it is possible that fraudulent person Y will Nvash* off name X printed on the cheque and 
replace it with his own. Fraudulent payee Y can then cash the cheque, using his valid drivers 
license as identification* Fraudulent person Y may not even bother to change the payee 
name, but instead rely on not being asked to authenticate himself or in having some false 
30 identity document in the 

nfltnfr of person X. 



The reliable establishment of identity has become a mote prominent is** with Hie recent 
aWty over terrorism, and research into more effective means is ongoing. Biometric 
wcbnique5 ^ve been refined, moving beyond the long established fingerprint «ecogn*on 
through to methods such as ins recognition (technic being pursued by die Federal 
5 Aviadon Authority (FAA) fox instance.) Biometric identification parameters have been 
encoded onto identity cards in various forms including the use of machine readable chips. 

Summary of an implementation of the Invention 

10 In one implementation, this invention is concerned vrith enhancing the security of cheque 
cashing operations at offline agencies by printing an encoded form of personal identification 
onto cheques. 

Th€ iavention here described aims to capitalise on the various forms of documentary 
15 identification by encoding onto cheques data mat relates to an identification document This 
data may be a driver's licence number, the social security number (SSN) or some data 
referring to a biometric measurement that appears on the identification document. This 
enables identification to be made at outlets which do not have Online access to former 
information, particularly since many identification documents contain secured images of the 
20 relevant person and mis gives rise to greater confidence in their authenticity. Identification 
of a customer is achieved by a sales parson simply scanning in the customer's cheque nsing 
normal bar code scanning point of sale equipment; that equipment than decodes and 
displays (on the cash register display) the Identification data, which the sales person can then 
easily compare with the identification data printed on an identification document presented 
25 by me customer to the sales person. Ideally, the identification document should include an 
identity photograph so that the sales person can check mat the identification document itself 
appears to be owned by the person presenting it. 

To encode the identification data, the cheque itself can be printed with a conventional 1 or 
3D 2D barcode or more sophisticated symbologies. such as those available &om Enseal Systems 
t spited and disclosed in PCT/GB02/00539. In this way, a fraudulent person presenting the 
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cheque for payment cannot simply Replace the true payee's name with his own and present 
his own drivers license etc. as proof of identity, since the encoded drivers license data on die 
cheque will not match that from the fraudulent payee's actual license. 



5 In effect the cheque has encoded onto it a reference to a more complicated set of data 
relating to an individual, whete the data itself would require a far larger payload than is 
feasible io a simple printing process on a limited area of a cheque* 

Tb& panting of identification data is carded out in genetal at the same time as the printing of 
10 the customised variable data onto the cheque,, using one of the range of symbologies which 
has been developed for ease of machine reading,, in a manner that will not degrade the 
workflow unduly. Typically the cheque printing will be part of a large payroll operation in 
which the employer has data such as SSN's on a database so that the whole process is easily 
automated. However, the same system could be used for individual printing, as, for instance, 
15 a doctor printing a prescription intended for a particular person where the doctor is likely to 
have access to various forms of personal iofonnation about that person, 

Hie security of the information which is printed onto the cheque need not be compromised. 
If, for instance, an SSN were to be used it could be transformed with a one way hash 

20 function before being encoded. At the receiving outlet the software would calculate the same 
hash and compare the values without revealing what the values actually were. Hence, the 
person presenting a cheque for encashment would type in his SSN on a keypad at the point 
of sale and this would be hashed to generate the value which is compared with the value 
obtained when scanning the cheque. Equally the data might be combined with a date or 

25 account number to ensure that it did not always appear in the same format. A further 
enhancement of security could be achieved by using the personal data as a key to some form 
of encryption of the personal identification data. 

The use of printing by instalments such as ordinary lasers is to be compared with systems 
30 such *ls those used with ATM*s where data is added to a cheque card in the form of 
modification of a magnetic stripe. Another important distinction with the ATM method is 
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that the vacation of identity at ATMs is based upon a PIN number which is a faction of 
the account number encoded onto the cheque card. The present invention concerns data 
added onto a cheque which has no simple functional relationship to any data contained on 
the cheque. Thete will be no means of deducing the encoded identifier fan the payee name 
c* account number without actual access to the document being used for identification. 

One extension would be that a code word (*g, dog's name, favourite drink etc) should be 
scrambled using a PIN and added to the ID card in machine readable form. At a point where 
identification takes place the person concerned types in the PIN and me code word and the 
software detennines from a scan of the 10 card whether there is a match. 

The point is. that a fraudster would have try out all possible PINS and all possible code 
wprds in order to defeat the system. In effect iris using a very long PIN number where the 
code word would be an object mat is easy to memorise. The advantage is that would be no 
15 real way for a fraudster to know when the data was correctly unscrambled. In fact the same 
system could be used on the cheque using a code word scrambled by a PIN which could, be 
a driver's licence number. 

In patent US 6,646.134 (October 2002) Page describes the printing of identification data 
20 onto a cheque for the enhancement of security, but me security depends upon access to a 
"central processing unit" for validation, and hence is not concerned with offline verification 
which is an advantage of this implementation. 
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Claim* 



5 1 - A document with user authentication, in which the document comprises the name of 
the ostensible user in human readable form, together with machine readable encoded data 
that can be decoded to generate a unique identifier, the unique Identifier also being present 
in a human readable form on an identification document carried by the true user of the 
document, such that the ostensible user of a document can be authenticated by comparing 
10 the unique identifier obtained from the document with the unique identifier on an 
identification document provided by the ostensible user. 

2. The document of Claiml in which the document is a cheque and the user is the 
payee named on the cheque. 

15 

3. The document of Claim 1 or 2 in which the machine readable encoded dasa is 
printed onto the document as a 1 or 2D bar code or othet form of graphical sytnbology. 

4. The document of Claim 3 in which the machine readable encoded data can be 
20 scanned by a bar code scanner, 

5. The document of Claim 1 in which the document is selected from, the following list 
of document types: 

(a) prescription for medicine; 
23 (b) tickets 

(c) identification document 

(d) passport 

(e) drirccs license 

30 6. The document of Claim 1 in which the machine readable encoded data is related to 
the unique identifier by a one way hash function. 
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